Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/p12mvPaU3sVE6yUwdFCKKKb0JPo.roa
File: p12mvPaU3sVE6yUwdFCKKKb0JPo.roa (raw, json)
Hash identifier: Vj9+kuHTsE8+DgFOeyVoOGQ32Vy7/0g3IEdTs3vR0u8=
Subject key identifier: A7:5D:A6:BC:F6:94:DE:C5:44:EB:25:30:74:50:8A:28:A6:F4:24:FA
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 01856F82427C5E8A0EEC8974FF745834CD8F
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/p12mvPaU3sVE6yUwdFCKKKb0JPo.roa
Signing time: Sun 01 Jan 2023 22:44:45 +0000
ROA not before: Sun 01 Jan 2023 22:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 193.34.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:42:7c:5e:8a:0e:ec:89:74:ff:74:58:34:cd:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Jan 1 22:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a75da6bcf694dec544eb253074508a28a6f424fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7a:a8:7d:ec:e2:b6:9a:31:49:17:77:f9:f5:
2d:65:f3:c3:1d:a4:56:00:e0:d6:ff:90:18:62:6b:
20:c4:f5:77:c3:9e:db:1e:3f:c9:0f:92:04:0c:f0:
96:f5:0a:39:e9:05:f1:b9:c5:fb:74:f4:9e:a5:1e:
c5:f3:8a:e9:0a:f5:9a:44:c1:ac:ec:c0:db:db:ab:
33:2c:36:03:00:9d:cc:f4:b9:91:0c:50:f7:6b:b3:
aa:90:ab:5c:94:fe:67:92:7b:d1:13:e0:f7:d2:a4:
e4:02:66:8e:2e:81:38:87:fd:b7:a2:28:86:7f:74:
45:b7:87:43:35:a7:e9:ad:3b:4a:a8:a7:5f:18:ec:
d4:34:14:63:04:db:e6:04:48:a5:80:66:57:c3:9a:
e0:61:69:a6:ba:57:82:56:a4:ff:b6:1e:2f:3a:c6:
c4:e7:e5:4c:1b:28:3b:4a:74:d5:5b:24:1a:f1:01:
8e:ca:2d:49:b2:69:37:94:be:cf:12:07:6d:2e:a1:
ae:6a:69:9b:1c:c4:cd:26:50:2b:ba:16:0d:d1:88:
df:61:d8:d2:81:91:17:09:2a:f1:08:a3:b8:81:8e:
7b:ea:2a:bd:10:1b:d3:2b:f7:19:61:a9:4f:14:4d:
e7:6e:3f:d4:76:9d:3f:bf:9a:e4:ec:43:fe:62:4b:
62:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5D:A6:BC:F6:94:DE:C5:44:EB:25:30:74:50:8A:28:A6:F4:24:FA
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/p12mvPaU3sVE6yUwdFCKKKb0JPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.50.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:94:06:b0:3a:d9:c5:4c:50:6c:45:97:94:69:7e:99:c8:5e:
1f:5a:92:b2:1d:9c:f8:11:75:86:7e:3f:d8:bd:1a:3e:29:a9:
60:db:11:07:e7:9a:01:a2:ad:21:86:d8:c0:95:56:1f:60:18:
f6:72:32:2d:50:a4:66:85:dc:b2:db:31:0d:5c:1a:b6:f1:65:
2e:9e:6f:59:06:43:cf:58:a9:37:d8:a7:fd:9b:8a:7a:b3:a0:
bb:1b:26:04:2a:14:46:22:a8:15:fe:49:56:45:0e:07:0f:4b:
1a:f5:7f:11:f6:2e:1f:f7:76:ba:34:70:4d:75:b7:a8:81:f0:
2b:49:35:40:c7:af:bb:b8:ad:18:01:bf:41:ee:85:e0:5d:36:
51:7b:39:b2:7d:9d:a2:38:33:9d:8d:1c:a6:dc:ab:61:19:8e:
76:79:b3:3b:dd:a0:eb:98:24:fd:52:dd:d8:dc:82:43:e2:c3:
56:e4:c2:aa:9f:f5:1b:6d:9a:e6:7d:9b:6c:c9:db:83:73:1f:
7d:af:4b:4c:30:3e:be:ae:5c:ab:95:d4:87:b9:c6:75:ec:04:
c0:dd:8c:03:bd:7e:c3:b6:b1:2b:f3:12:df:d5:14:ab:d8:16:
10:a2:18:36:53:20:ec:ed:ba:43:a8:42:6e:28:ca:ca:97:8c:
3e:4d:41:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:56 2024 by rpki-client on console-fra.rpki-client.org